Opened 2 months ago

Last modified 4 weeks ago

#3188 new task

Manage DNS via ansible

Reported by: strk Owned by: sac-tickets@…
Priority: normal Milestone: Unplanned
Component: SysAdmin/DNS Keywords:
Cc:

Description

See ​https://docs.ansible.com/ansible/latest/collections/community/general/cloudflare_dns_module.html

Change History (3)

comment:1 by strk, 4 weeks ago

I've generated an API token for use with Ansible and pushed to password-store, next stop: add the TXT record requested in #3211 with Ansible and that token.

comment:2 by strk, 4 weeks ago

I've realized not all DNS zones are managed via cloudflare so we'll also need another Ansible role to deal with PairDomain. By the way, the wiki page should be updated to mention Cloudflare - Regina can I count on you to do that, as the one who introduced that service ? ​https://wiki.osgeo.org/wiki/SAC_DNS_Registry

comment:3 by strk, 4 weeks ago

As a proof of concept, the cloudflare module is now used by a dns-records role and allows deploying a subset of the records (a subset of the SPF ones) via ansible: 

ansible-playbook deployment/deploy-dns-records.yml

What's left to do is migrate ALL records of cloudflare, and dealing with PairDomain

Note: See TracTickets for help on using tickets.